Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa
File:                     3138392e35312e3230342e302f32332d3233203d3e203238333532.roa (raw, json)
Hash identifier:          3+s8sy4JNsCH07ihQkkeI6M3aYx7JWAmXOwvLBSj1W4=
Subject key identifier:   84:2F:BB:BB:30:4C:4C:96:29:51:3D:43:AB:94:C0:E6:EC:85:0D:03
Certificate issuer:       /CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
Certificate serial:       26E243C453A559C767E3B10B3DB2ECA290E77D88
Authority key identifier: A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa
Signing time:             Fri 13 Oct 2023 14:36:57 +0000
ROA not before:           Fri 13 Oct 2023 14:31:57 +0000
ROA not after:            Fri 11 Oct 2024 14:36:57 +0000
asID:                     28352
IP address blocks:        189.51.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e2:43:c4:53:a5:59:c7:67:e3:b1:0b:3d:b2:ec:a2:90:e7:7d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73E5F293D7FB52C37A0142C04415DDFA04C4602
        Validity
            Not Before: Oct 13 14:31:57 2023 GMT
            Not After : Oct 11 14:36:57 2024 GMT
        Subject: CN=842FBBBB304C4C9629513D43AB94C0E6EC850D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:be:1d:55:05:0c:86:b1:35:30:bd:f3:f1:
                    b5:b8:d9:48:52:5e:ba:4e:b6:ad:9b:f9:65:10:db:
                    72:ee:ce:6c:0d:f9:7d:67:2a:ac:04:fb:8f:e9:7d:
                    6c:27:38:58:cf:02:76:dd:4f:3f:00:d5:18:33:2d:
                    d5:2a:ab:0d:6d:57:20:a2:c2:07:31:e9:f4:ca:f2:
                    2b:b3:5f:51:2e:be:c7:f3:f8:15:f2:9f:78:fb:f3:
                    36:81:c0:0b:74:f1:cd:78:8b:c1:3d:5e:7e:e5:8f:
                    38:a4:48:d1:e9:07:b4:68:8e:48:30:14:66:61:01:
                    b5:96:f1:4e:ab:58:01:7c:eb:b0:cd:7b:7e:e5:32:
                    28:34:f2:58:8b:a9:9d:5e:5d:60:e6:40:d9:bd:71:
                    ef:6c:54:ba:9e:7f:4c:63:d3:f6:35:b1:0a:92:e8:
                    f6:a8:72:c4:e0:fd:84:ca:4c:dd:e1:91:8c:76:36:
                    93:6f:4f:20:b8:9d:11:4d:99:45:26:b5:3c:b2:51:
                    e7:5b:1d:5a:44:83:90:87:a0:84:9b:6f:e2:f1:e7:
                    92:0f:f7:30:0a:e3:2f:0a:80:a1:36:90:30:2e:bf:
                    36:98:85:7e:4d:da:12:c0:30:79:bc:bb:52:c7:b6:
                    bd:1d:17:9e:c0:57:48:d3:ef:c4:77:87:80:66:2f:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:BB:BB:30:4C:4C:96:29:51:3D:43:AB:94:C0:E6:EC:85:0D:03
            X509v3 Authority Key Identifier:
                keyid:A7:3E:5F:29:3D:7F:B5:2C:37:A0:14:2C:04:41:5D:DF:A0:4C:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A73E5F293D7FB52C37A0142C04415DDFA04C4602.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3230342e302f32332d3233203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:6e:88:04:d5:8a:00:70:b1:3b:11:70:87:e8:89:58:7d:
         0c:5f:38:96:13:ef:98:dc:fc:26:f0:51:bb:aa:dc:48:bd:cf:
         1e:cd:f6:6e:bf:2e:58:ba:41:b6:74:7d:5d:02:e9:0e:e6:ad:
         1a:5c:6b:3c:11:1e:cd:42:71:d5:a4:23:ba:77:7d:c7:d4:d6:
         d0:bb:f0:29:b9:94:70:09:ab:06:0f:9c:39:ff:f5:e9:ea:60:
         db:fe:5a:f7:45:d3:ab:50:bf:3d:eb:4f:3a:2d:e4:e8:bb:87:
         4a:31:57:b6:f3:ec:1d:65:23:a7:39:34:ec:63:59:35:2d:34:
         26:ae:71:04:7e:a8:2a:9a:50:d1:01:72:f9:42:14:f5:d2:e4:
         2e:a4:aa:34:3c:92:f2:24:85:d8:68:9c:4b:44:74:05:e3:6d:
         ef:99:14:a4:71:90:36:c9:ff:3c:9e:45:ab:9a:09:02:4f:a8:
         81:7f:9c:90:04:6c:11:26:74:89:1e:73:74:9d:74:22:da:5d:
         fa:87:f5:83:28:96:8f:4e:a6:5e:1c:e3:23:c2:37:4e:e7:83:
         00:0d:3c:a3:4e:a7:cb:9c:86:4e:6b:48:53:cc:67:d5:06:f4:
         b9:a5:9e:c8:32:be:49:74:c9:65:34:45:cd:0c:ef:4d:9b:c9:
         78:ce:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org